Storm-0530

Reports per quarter

CVEs named in reports

• CVE-2021-20038 KEV ransomware
• CVE-2021-21551 KEV
• CVE-2021-44228 KEV ransomware
• CVE-2021-45105
• CVE-2022-0609 KEV
• CVE-2022-24990 KEV ransomware
• CVE-2022-26352 KEV ransomware
• CVE-2022-30190 KEV ransomware

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 28 May 2024

   Moonstone Sleet emerges as new North Korean threat actor with new bag of tricks

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Moonstone Sleet emerges as new North Korean threat actor with new bag of tricks

2. 24 March 2023

   APT attacks on industrial organizations in H2 2022 | Kaspersky ICS CERT EN

   Malpedia library date Kaspersky fromORKLCCS '25 data

   Archived copy on ORKL Detailsfor APT attacks on industrial organizations in H2 2022 | Kaspersky ICS CERT EN

3. 9 February 2023

   #StopRansomware: Ransomware Attacks on Critical Infrastructure Fund DPRK Malicious Cyber Activities | CISA

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor #StopRansomware: Ransomware Attacks on Critical Infrastructure Fund DPRK Malicious Cyber Activities | CISA

4. 9 February 2023

   CSA_RANSOMWARE_ATTACKS_ON_CI_FUND_DPRK_ACTIVITIES.PDF

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor CSA_RANSOMWARE_ATTACKS_ON_CI_FUND_DPRK_ACTIVITIES.PDF

5. 16 December 2022

   The DPRK delicate sound of cyber

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor The DPRK delicate sound of cyber

6. 16 December 2022

   The DPRK delicate sound of cyber

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor The DPRK delicate sound of cyber

7. 4 August 2022

   Secure Communications Blog

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Secure Communications Blog

8. 4 August 2022

   North Korean H0lyGh0st Ransomware Has Ties to Global Geopolitics

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor North Korean H0lyGh0st Ransomware Has Ties to Global Geopolitics

9. 29 July 2022

   H0lyGh0st - North Korean Threat Group Strikes Back With New Ransomware

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor H0lyGh0st - North Korean Threat Group Strikes Back With New Ransomware

10. 14 July 2022

    North Korean threat actor (H0lyGh0st -DEV-0530) targets small and midsize businesses with H0lyGh0st ransomware

    date in the title fromORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor North Korean threat actor (H0lyGh0st -DEV-0530) targets small and midsize businesses with H0lyGh0st ransomware

Newest first. Details opens the report in Explore.